$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: 5p5fO8Al4mjqcrSqOYsT3ZQ2q7sw+Q9z40G7U4QGYv4= Subject key identifier: C7:68:18:E9:31:1F:DD:92:AF:0C:2F:C0:FF:85:F9:50:E8:CF:6C:CF Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 0990 Signing time: Wed 02 Jul 2025 20:20:26 +0000 Manifest this update: Wed 02 Jul 2025 20:20:25 +0000 Manifest next update: Wed 09 Jul 2025 20:20:25 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: LSbwT1jYVzm+S4ASCM96H0KM2z2CxkgrNKgPEwZ92zk=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: onBNfM/Pn1GMIqfcUmL/COXE+dl4lbaBIGgghkrv3qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Jul 2 20:20:25 2025 GMT Not After : Jul 9 20:20:25 2025 GMT Subject: CN=6865948a-3a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:b4:9b:af:12:de:c5:a0:a2:28:02:6b:4d: 44:c1:4d:e6:d3:d2:e5:de:e6:c1:e4:bc:dc:db:a4: 21:ff:b0:42:76:9d:3f:a8:be:e5:67:60:a6:09:10: 5d:aa:92:d8:30:8d:3d:9d:83:07:75:eb:34:1a:5b: 5b:3e:3e:f6:f3:26:35:50:e4:eb:5b:06:ec:e2:38: 71:71:b1:36:7d:61:69:55:19:c2:9e:76:50:8b:e5: ab:75:24:4c:44:00:17:1b:bd:c7:91:86:45:65:95: 27:18:cf:f5:36:f3:23:a0:23:ce:0a:ef:40:73:b2: 1d:da:1f:e1:05:e2:db:25:7d:4e:df:0a:9b:60:07: 8f:d8:22:01:4e:5b:19:3d:e2:df:6b:fb:34:63:66: e8:2e:d8:40:1f:c5:17:ac:88:ef:7a:23:36:72:9d: 67:ed:04:89:8d:e3:4e:65:3a:b2:7e:f4:d5:b5:85: f7:93:c8:0b:db:fd:00:28:67:89:63:20:ba:e5:de: ea:df:6d:e2:f9:4f:ae:a5:4b:0a:56:ca:8f:a0:be: 3e:d9:e4:0b:23:21:31:60:18:cf:9e:8d:ca:84:11: 78:fb:af:ca:95:d1:c8:9b:d9:36:b5:a0:e0:c2:a6: 57:e0:66:b9:d5:2d:42:1d:b4:e0:b0:0f:54:a4:6c: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:68:18:E9:31:1F:DD:92:AF:0C:2F:C0:FF:85:F9:50:E8:CF:6C:CF X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e5:5d:fd:d5:b2:08:71:b3:d2:44:e9:4f:42:f8:56:32:b7: 8f:3a:fd:f4:02:b0:a3:b0:3f:14:bc:a6:9b:00:87:31:93:90: 00:93:b7:67:98:8e:18:d5:27:64:ac:32:26:af:3c:42:fa:19: 7d:7a:9f:47:37:f4:b7:63:f1:9c:2c:1b:df:c6:47:f1:26:89: 3c:8c:88:d8:78:74:ee:6f:48:ba:c0:cf:b8:fa:2c:0f:30:72: 63:e0:e9:91:69:48:8d:99:a1:38:dc:91:bc:c9:9f:5d:52:43: b5:73:20:87:fb:9e:22:67:ed:bc:68:4f:69:a8:c9:d4:b2:78: 3c:fd:be:ec:fb:31:8c:5c:55:df:8c:96:56:58:99:cd:ab:eb: 2c:e2:6a:8d:4c:aa:07:be:39:44:22:e8:1a:04:e2:b2:80:6e: 99:2d:a5:54:26:59:7c:da:e3:a6:59:e3:1f:0d:8d:a8:c2:ea: d3:f7:de:df:d2:6d:63:fb:46:1d:f1:c7:6f:5e:11:e3:d1:4f: 80:32:ff:a5:35:c9:72:33:03:6b:52:1e:58:98:4a:0c:c4:5f: f7:7e:7b:58:a9:6c:57:f9:ad:15:76:3a:6a:f5:7c:31:88:12: 8c:30:79:b4:ee:98:ba:67:23:a3:3f:cc:16:11:8f:62:15:73: b5:30:0b:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjUwNzAyMjAyMDI1WhcNMjUwNzA5MjAyMDI1WjAYMRYwFAYD VQQDEw02ODY1OTQ4YS0zYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjW0m68S3sWgoigCa01EwU3m09Ll3ubB5Lzc26Qh/7BCdp0/qL7lZ2CmCRBd qpLYMI09nYMHdes0GltbPj728yY1UOTrWwbs4jhxcbE2fWFpVRnCnnZQi+WrdSRM RAAXG73HkYZFZZUnGM/1NvMjoCPOCu9Ac7Id2h/hBeLbJX1O3wqbYAeP2CIBTlsZ PeLfa/s0Y2boLthAH8UXrIjveiM2cp1n7QSJjeNOZTqyfvTVtYX3k8gL2/0AKGeJ YyC65d7q323i+U+upUsKVsqPoL4+2eQLIyExYBjPno3KhBF4+6/KldHIm9k2taDg wqZX4Ga51S1CHbTgsA9UpGxrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdoGOkx H92SrwwvwP+F+VDoz2zPMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ5V391bIIcbPSROlPQvhWMrePOv30ArCjsD8UvKabAIcxk5AAk7dn mI4Y1SdkrDImrzxC+hl9ep9HN/S3Y/GcLBvfxkfxJok8jIjYeHTub0i6wM+4+iwP MHJj4OmRaUiNmaE43JG8yZ9dUkO1cyCH+54iZ+28aE9pqMnUsng8/b7s+zGMXFXf jJZWWJnNq+ss4mqNTKoHvjlEIugaBOKygG6ZLaVUJll82uOmWeMfDY2owurT997f 0m1j+0Yd8cdvXhHj0U+AMv+lNclyMwNrUh5YmEoMxF/3fntYqWxX+a0Vdjpq9Xwx iBKMMHm07pi6ZyOjP8wWEY9iFXO1MAtw -----END CERTIFICATE-----Generated at Fri Jul 4 19:32:16 2025 by rpki-client